CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Jenkins.
CVE
CVE-2022-43435
Severity
MEDIUM
CVSS
5.3
EPSS
0.63%
Jenkins
Original NVD Description
Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Related CVEs
Other vulnerabilities affecting the same vendor(s)